-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Spring Web
Description | Spring Web
Language | JAVA
Vulnerability | C…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Spring Expression Language (SpEL)
Description | Spring Expression Languag…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Apache Log4j
Description | Apache Log4j 1.2
Language | JAVA
Vulnerabi…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Apache Sling JSON Library
Description | Apache Sling JSON Library
Langu…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Apache Log4j
Description | Apache Log4j 1.2
Language | JAVA
Vulnerabi…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Apache Commons IO
Description | The Apache Commons IO library contains ut…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Apache Log4j
Description | Apache Log4j 1.2
Language | JAVA
Vulnerabi…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Apache Log4j
Description | Apache Log4j 1.2
Language | JAVA
Vulnerabi…
-
Veracode Software Composition Analysis
===============================
Attribute | Details
| --- | --- |
Library | Apache Commons Collections
Description | The Apache Commons Collections p…
-
I'd like to better understand if the SARIF output format would work well with SCA tooling. For example, the various tooling that integrate Sonatype's OSSIndex. Is there an example SARIF output for suc…